SAML/SSO

What is SAML\SSO?

SAML (Security Assertion Markup Language) and SSO (Single Sign-On) are technologies used in identity and access management systems. SAML facilitates secure communication between identity providers (like login systems) and service providers (like web applications), allowing users to access multiple services with a single set of credentials. SSO, on the other hand, enables users to log in once and gain access to multiple connected systems without re-entering credentials. Together, SAML and SSO streamline authentication processes, enhance security, and improve user experience across various applications and services.

Blogs

• https://epi052.gitlab.io/notes-to-self/blog/2019-03-07-how-to-test-saml-a-methodology/

• https://epi052.gitlab.io/notes-to-self/blog/2019-03-13-how-to-test-saml-a-methodology-part-two/

• https://epi052.gitlab.io/notes-to-self/blog/2019-03-16-how-to-test-saml-a-methodology-part-three/

• https://github.com/kelbyludwig/saml-attack-surface

• http://secretsofappsecurity.blogspot.com/2017/01/saml-security-xml-external-entity-attack.html

• https://seanmelia.wordpress.com/2016/01/09/xxe-via-saml/

• https://hackerone.com/reports/136169